Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: BHi6JZXlqqvlJm/HSyZIOzKt3ogdcBhb1opaFWESQGc=
Subject key identifier: 88:4F:24:58:20:4A:54:1A:43:F8:BF:D7:96:5F:06:26:BE:ED:4B:DE
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 01992B587E01782B5B81F4EACD1BC5DCA7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 167A
Signing time: Mon 08 Sep 2025 22:00:43 +0000
Manifest this update: Mon 08 Sep 2025 22:00:43 +0000
Manifest next update: Tue 09 Sep 2025 22:00:43 +0000
Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=)
2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=)
3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=)
4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: yAhESQPyiE+yyTIQDL5eLP4vK8Kg5wxSXO1dgT/0wMI=)
5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=)
6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:58:7e:01:78:2b:5b:81:f4:ea:cd:1b:c5:dc:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Sep 8 22:00:43 2025 GMT
Not After : Sep 9 22:00:43 2025 GMT
Subject: CN=884f2458204a541a43f8bfd7965f0626beed4bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:93:53:a4:ab:8d:b1:f1:e1:d5:cb:c3:30:
4f:41:9a:9b:9c:18:f4:1d:cc:2e:a6:55:e3:9a:7b:
ea:bd:25:a6:54:7a:6b:89:1c:ff:a0:29:45:3a:32:
bf:d9:73:00:81:bb:2d:74:cd:ee:f9:dc:01:89:d4:
6f:df:b3:9a:6f:a1:25:fc:60:2d:13:c6:3c:7d:a7:
d4:54:e5:66:b9:a5:75:a9:fe:d6:70:28:45:76:a9:
2d:7e:1c:03:75:9f:f7:9b:70:de:c3:41:14:0a:06:
99:de:93:a5:3c:79:cc:e1:73:37:3f:60:2f:62:20:
3e:ee:0a:a4:68:af:97:b0:df:a4:3b:37:bd:61:c2:
9b:9a:f4:12:b2:f4:60:37:7e:4b:7a:55:3a:91:ab:
52:b1:38:9d:da:de:da:b2:70:e6:27:5b:56:64:44:
d1:13:83:92:fb:6d:99:5f:3a:6d:17:60:ba:4e:ce:
54:1f:1a:57:3c:ca:a9:ba:be:79:af:78:a0:03:f4:
69:b1:df:fc:e4:ed:c7:19:7f:be:87:28:f3:b6:57:
61:ab:16:6d:ee:c8:04:e6:4d:74:d1:c3:bb:fc:2a:
1f:0f:7d:4f:a0:cd:74:ef:dd:92:2a:e3:75:22:62:
5d:9c:f7:ca:45:17:52:45:6a:d5:12:97:99:2f:fd:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:24:58:20:4A:54:1A:43:F8:BF:D7:96:5F:06:26:BE:ED:4B:DE
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:74:8c:c5:09:21:8c:4f:17:73:d4:05:1f:7c:dc:f1:e6:
93:86:dc:e3:3d:4f:4d:6e:bc:64:64:0c:7e:bf:84:1c:f6:ea:
38:72:a1:9d:4c:8e:3b:a3:c8:9a:a6:e5:43:c1:81:2f:84:5d:
9e:24:09:53:d7:b6:5d:fc:23:da:d1:51:c5:6e:df:ea:c5:da:
12:a1:7c:a1:24:28:6e:8e:2e:57:55:57:80:44:fb:0e:2b:0d:
67:a4:5d:92:cf:da:b9:cd:1f:f9:23:fd:84:10:40:5e:1e:a9:
20:cf:48:70:4c:00:5d:23:bd:27:ed:a4:15:d5:73:57:75:90:
0e:e0:9f:8a:ad:ee:c1:3c:c6:cd:37:91:2d:bb:8e:2b:b7:2b:
aa:4e:ac:7e:96:70:7b:09:21:a3:c3:2c:90:6b:94:28:5f:c9:
a5:fe:b1:42:8b:58:d3:5a:ed:c9:fb:6c:01:b9:4e:07:29:2f:
f2:f9:0f:0c:a6:eb:ec:55:f4:59:37:64:85:6c:ea:9d:8f:eb:
5e:8c:f2:48:e6:7b:1c:ab:b1:60:a3:4e:ee:93:ce:bf:6a:57:
e1:c2:c8:af:05:63:fe:01:2f:88:c3:9a:b3:9a:93:e9:d4:ae:
c5:c6:e6:76:8f:37:2c:59:a3:c2:be:85:a3:18:8e:3c:7b:1c:
58:b4:6d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrWH4BeCtbgfTqzRvF3Ke8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjUwOTA4MjIwMDQzWhcNMjUwOTA5MjIwMDQzWjAzMTEwLwYDVQQD
Eyg4ODRmMjQ1ODIwNGE1NDFhNDNmOGJmZDc5NjVmMDYyNmJlZWQ0YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JSTU6SrjbHx4dXLwzBPQZqbnBj0
HcwuplXjmnvqvSWmVHpriRz/oClFOjK/2XMAgbstdM3u+dwBidRv37Oab6El/GAt
E8Y8fafUVOVmuaV1qf7WcChFdqktfhwDdZ/3m3Dew0EUCgaZ3pOlPHnM4XM3P2Av
YiA+7gqkaK+XsN+kOze9YcKbmvQSsvRgN35LelU6katSsTid2t7asnDmJ1tWZETR
E4OS+22ZXzptF2C6Ts5UHxpXPMqpur55r3igA/Rpsd/85O3HGX++hyjztldhqxZt
7sgE5k100cO7/CofD31PoM10792SKuN1ImJdnPfKRRdSRWrVEpeZL/0L7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhPJFggSlQaQ/i/15ZfBia+7UveMB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG10jMUJ
IYxPF3PUBR983PHmk4bc4z1PTW68ZGQMfr+EHPbqOHKhnUyOO6PImqblQ8GBL4Rd
niQJU9e2Xfwj2tFRxW7f6sXaEqF8oSQobo4uV1VXgET7DisNZ6Rdks/auc0f+SP9
hBBAXh6pIM9IcEwAXSO9J+2kFdVzV3WQDuCfiq3uwTzGzTeRLbuOK7crqk6sfpZw
ewkho8MskGuUKF/Jpf6xQotY01rtyftsAblOBykv8vkPDKbr7FX0WTdkhWzqnY/r
XozySOZ7HKuxYKNO7pPOv2pX4cLIrwVj/gEviMOas5qT6dSuxcbmdo83LFmjwr6F
oxiOPHscWLRtNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:14:54 2025 by rpki-client